Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
File: ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa (raw, json)
Hash identifier: 9wEYnVJc5eXc1iL7h+6eFB1emfd4F5AByr55Fwh/XHE=
Subject key identifier: B2:4B:24:E7:C9:DB:5E:3C:62:7D:86:33:B0:B0:D1:61:85:7A:09:AE
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F432858495529520649CA5FB42D9EB7E0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 170.89.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:52:06:49:ca:5f:b4:2d:9e:b7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=663a0615-a3d6-47d3-96a0-9668d102f515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:8a:45:7a:f6:32:3c:cd:ef:a3:fc:1d:32:
73:87:ff:61:55:12:c6:3c:b0:8e:76:f5:12:5c:68:
f1:bf:86:47:03:78:9d:d7:c1:0b:4b:7d:5d:9e:9c:
68:63:d8:57:b2:d7:b0:07:8a:e1:22:e0:38:4c:f3:
87:ef:6e:d7:8e:2a:b3:60:f0:d1:72:92:35:bd:d6:
2e:6d:c7:ae:6e:f3:66:ba:b3:c9:82:a7:99:19:ea:
d1:56:c5:de:f7:c4:06:b3:68:c2:88:4e:9f:b7:60:
52:31:de:b7:7c:db:ca:28:cf:35:32:e1:ef:89:c9:
e2:c0:0a:f5:3d:20:7f:1d:1f:88:af:68:fb:f6:4a:
27:50:f4:e1:32:d0:6a:7e:8b:ff:22:95:0e:b9:66:
cc:2f:01:86:8e:e6:dc:9e:fe:4c:ab:76:5b:30:4a:
b4:c9:51:e5:6a:7e:9f:9f:f7:8d:bc:4e:39:b8:33:
04:e5:8b:34:17:a5:61:95:dd:e8:aa:13:b5:e6:b3:
5a:ab:5c:e4:96:51:62:0d:67:50:e9:1a:5d:65:73:
39:ac:61:a9:0f:b4:c7:13:9a:43:28:b9:3f:a2:f1:
b6:86:20:f2:2e:ac:57:bd:fc:d5:59:df:7d:a1:c9:
d0:47:1f:9f:9f:f5:5e:4a:c4:30:9a:ad:a9:ed:9e:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:24:E7:C9:DB:5E:3C:62:7D:86:33:B0:B0:D1:61:85:7A:09:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
170.89.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:9a:23:3f:be:e9:87:3c:11:8d:59:3e:56:26:7f:9d:c6:e1:
e2:51:8b:d6:f3:fe:26:01:67:e0:a6:31:94:16:d0:ad:d6:d5:
56:96:3b:72:1c:b1:83:b1:d9:38:48:bf:4c:e6:a5:39:c8:45:
c6:67:1f:af:a5:a6:b3:81:76:6d:57:ac:58:44:8d:b6:ab:7b:
ec:b0:66:a7:2e:ca:5b:44:59:cc:e3:16:c7:96:22:c7:5d:10:
02:c5:56:ed:bf:b8:ac:f6:af:de:9d:30:ae:91:96:b8:6a:70:
72:69:38:18:21:1f:b0:82:83:44:02:0f:c8:dd:0d:54:1d:8f:
f1:9d:13:f7:9a:ad:39:08:3c:55:4a:35:11:c2:f6:26:da:6d:
9a:c2:d1:77:1f:91:ab:28:7c:f2:3b:76:0c:0a:8d:d6:e7:6d:
42:8f:c9:2c:ab:95:22:3e:97:c1:ec:92:2f:0e:6d:6b:24:e4:
d5:7f:a7:1c:a8:aa:4b:f3:15:46:b0:d5:77:59:ac:b9:96:4e:
a0:dd:08:c8:f5:a6:07:53:63:d2:fb:76:2e:29:37:a3:da:a8:
3f:4b:cf:c4:eb:bc:d8:e9:f8:7a:73:08:69:8b:7b:d9:44:03:
24:bc:52:28:d1:1b:ea:9e:fb:58:26:53:45:0e:b4:dc:52:59:
22:9e:5f:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVIGScpftC2et+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
NjYzYTA2MTUtYTNkNi00N2QzLTk2YTAtOTY2OGQxMDJmNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyICKRXr2MjzN76P8HTJzh/9hVRLGPLCOdvUS
XGjxv4ZHA3id18ELS31dnpxoY9hXstewB4rhIuA4TPOH727XjiqzYPDRcpI1vdYu
bceubvNmurPJgqeZGerRVsXe98QGs2jCiE6ft2BSMd63fNvKKM81MuHvicniwAr1
PSB/HR+Ir2j79konUPThMtBqfov/IpUOuWbMLwGGjubcnv5Mq3ZbMEq0yVHlan6f
n/eNvE45uDME5Ys0F6Vhld3oqhO15rNaq1zkllFiDWdQ6RpdZXM5rGGpD7THE5pD
KLk/ovG2hiDyLqxXvfzVWd99ocnQRx+fn/VeSsQwmq2p7Z7K4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJLJOfJ2148Yn2GM7Cw0WGFegmuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZWQ2ZTQ3ZDgtODFiYy0z
YmYzLTk3MjktMGMzOTBhZjYxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6aIz++6Yc8EY1ZPlYmf53G4eJRi9bz/iYBZ+CmMZQW0K3W1VaWO3Ic
sYOx2ThIv0zmpTnIRcZnH6+lprOBdm1XrFhEjbare+ywZqcuyltEWczjFseWIsdd
EALFVu2/uKz2r96dMK6RlrhqcHJpOBghH7CCg0QCD8jdDVQdj/GdE/earTkIPFVK
NRHC9ibabZrC0XcfkasofPI7dgwKjdbnbUKPySyrlSI+l8Hski8ObWsk5NV/pxyo
qkvzFUaw1XdZrLmWTqDdCMj1pgdTY9L7di4pN6PaqD9Lz8TrvNjp+HpzCGmLe9lE
AyS8UijRG+qe+1gmU0UOtNxSWSKeX2k=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:21 2025 by rpki-client on console.sobornost.net